CVE-2025-61506
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
03/02/2026
Last modified:
03/02/2026
Description
An issue was discovered in MediaCrush thru 1.0.1 allowing remote unauthenticated attackers to upload arbitrary files of any size to the /upload endpoint.